$ rpki-client -vvf rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft File: FF-_nuMXN-kcPNSE7AFq48jzgDw.mft (raw, json) Hash identifier: /EPIKUEvtWWBvGKa+M5p7EVL+XX5g5M7hJFgENYP8P0= Subject key identifier: F3:50:1A:01:98:AA:FC:25:0B:17:3B:D1:9E:C8:B6:A8:24:ED:D2:E9 Authority key identifier: 14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C Certificate issuer: /CN=A91B978D/serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C Certificate serial: 02C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft Manifest number: 02C3 Signing time: Sat 19 Jul 2025 01:50:08 +0000 Manifest this update: Sat 19 Jul 2025 01:50:08 +0000 Manifest next update: Sat 26 Jul 2025 01:50:08 +0000 Files and hashes: 1: FF-_nuMXN-kcPNSE7AFq48jzgDw.crl (hash: 6VzT/I3/4AOlaS2536Jjb/twT0klagJu7iOHsCAuUq8=) 2: D5D64BB0FB6811EC863B8150C4F9AE02.roa (hash: QqynXUFn2t2DwRQgssbkvYUHxaAcBlMuvOzz1OFVxaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:50:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 712 (0x2c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B978D, serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C Validity Not Before: Jul 19 01:50:08 2025 GMT Not After : Jul 26 01:50:08 2025 GMT Subject: CN=687af9d0-459d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:68:a6:07:25:8e:27:92:99:1b:b0:f9:5f:13: 83:af:a0:87:05:d0:d7:7b:57:f2:68:f2:6a:d4:f3: 0b:04:ac:6c:b3:5a:f6:75:90:f9:93:a7:d0:19:c8: eb:6a:e9:87:4c:97:ef:de:5f:9d:28:61:55:95:e8: b9:7f:40:4a:c4:50:c0:b8:75:fb:0d:50:f1:cb:ba: 1c:39:9b:a5:21:7f:c4:17:eb:77:81:71:05:a6:a2: 6a:a4:d8:bb:e7:45:16:7b:68:87:dd:8f:e3:a7:da: 47:d6:8e:bc:80:0c:08:b3:93:c0:6b:a1:ef:14:e4: 8a:5d:1d:65:87:30:96:0b:d3:f3:36:c8:d6:43:23: 8d:cf:a3:ac:64:a7:3a:3b:df:cd:ec:79:f2:1a:ee: 31:72:1a:57:7e:cd:d9:df:f5:5c:9b:cc:25:90:b4: c1:81:b0:ef:ef:9a:7a:e5:00:72:aa:19:1b:2b:1f: f5:1e:1d:74:96:42:9c:87:72:6f:df:28:8f:7a:ac: f9:42:76:7e:de:bb:a8:df:82:53:13:8c:db:81:0d: 6c:3f:cb:8f:ab:c6:63:52:b2:71:c4:8b:b9:46:d4: 3e:e2:c7:89:b5:ee:a0:f4:b8:7e:a4:11:51:4f:22: 10:7e:cd:96:a5:b2:d2:52:cf:9c:21:2c:12:6f:48: ba:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:50:1A:01:98:AA:FC:25:0B:17:3B:D1:9E:C8:B6:A8:24:ED:D2:E9 X509v3 Authority Key Identifier: keyid:14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:44:f4:0a:24:6e:b5:da:64:a6:14:d4:82:e7:54:78:5a:41: 21:5b:dc:51:2c:1c:31:97:f7:63:59:5e:09:9d:f4:a9:c1:4d: 42:34:59:8b:e7:1c:b6:ff:d6:39:61:7a:74:a1:f2:da:0d:df: 06:18:58:56:8d:12:eb:23:73:42:c1:be:dc:08:9f:79:9a:a7: aa:07:85:05:f7:e4:8d:3a:09:7b:b6:06:13:81:1f:34:62:0a: c8:0c:68:12:de:ca:11:4f:e7:0f:d2:43:0d:08:6b:0a:60:97: 0b:bf:b4:10:a7:1e:54:56:04:98:3f:c7:56:03:e3:8d:92:52: e8:34:20:81:23:c4:43:ee:d6:c9:d3:c6:dc:fd:00:66:ef:6b: 02:b4:69:c1:7c:e4:1f:eb:18:1d:74:90:5f:ac:71:8e:ac:df: e9:81:f5:bb:d0:22:a8:3f:6f:07:f9:ff:58:ec:e6:ce:58:01: ae:2e:6b:d7:27:3f:87:7c:40:e3:44:cf:00:5e:c5:38:13:8a: 12:d4:ce:bc:7a:d5:9b:5a:88:40:b7:bc:34:d2:79:a8:9d:68: 44:d2:55:e1:bf:28:aa:cd:5d:7d:2c:16:8c:b5:64:3c:96:8f: ad:8d:6d:52:6a:b9:4b:e6:90:f8:ef:ed:a2:bd:47:ec:8c:38: f2:ae:d1:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk3OEQxMTAvBgNVBAUTKDE0NUZCRjlFRTMxNzM3RTkxQzNDRDQ4NEVDMDE2QUUz QzhGMzgwM0MwHhcNMjUwNzE5MDE1MDA4WhcNMjUwNzI2MDE1MDA4WjAYMRYwFAYD VQQDEw02ODdhZjlkMC00NTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2imByWOJ5KZG7D5XxODr6CHBdDXe1fyaPJq1PMLBKxss1r2dZD5k6fQGcjr aumHTJfv3l+dKGFVlei5f0BKxFDAuHX7DVDxy7ocOZulIX/EF+t3gXEFpqJqpNi7 50UWe2iH3Y/jp9pH1o68gAwIs5PAa6HvFOSKXR1lhzCWC9PzNsjWQyONz6OsZKc6 O9/N7HnyGu4xchpXfs3Z3/Vcm8wlkLTBgbDv75p65QByqhkbKx/1Hh10lkKch3Jv 3yiPeqz5QnZ+3ruo34JTE4zbgQ1sP8uPq8ZjUrJxxIu5RtQ+4seJte6g9Lh+pBFR TyIQfs2WpbLSUs+cISwSb0i66QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNQGgGY qvwlCxc70Z7Itqgk7dLpMB8GA1UdIwQYMBaAFBRfv57jFzfpHDzUhOwBauPI84A8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTc4RC82N0I0NDgyOEZC NjYxMUVDQUJBMTAxNEZDNEY5QUUwMi9GRi1fbnVNWE4ta2NQTlNFN0FGcTQ4anpn RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZGLV9udU1YTi1rY1BOU0U3QUZxNDhqemdEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTc4RC82N0I0NDgyOEZCNjYxMUVDQUJBMTAxNEZDNEY5QUUwMi9GRi1fbnVNWE4t a2NQTlNFN0FGcTQ4anpnRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALRPQKJG612mSmFNSC51R4WkEhW9xRLBwxl/djWV4JnfSpwU1CNFmL 5xy2/9Y5YXp0ofLaDd8GGFhWjRLrI3NCwb7cCJ95mqeqB4UF9+SNOgl7tgYTgR80 YgrIDGgS3soRT+cP0kMNCGsKYJcLv7QQpx5UVgSYP8dWA+ONklLoNCCBI8RD7tbJ 08bc/QBm72sCtGnBfOQf6xgddJBfrHGOrN/pgfW70CKoP28H+f9Y7ObOWAGuLmvX Jz+HfEDjRM8AXsU4E4oS1M68etWbWohAt7w00nmonWhE0lXhvyiqzV19LBaMtWQ8 lo+tjW1SarlL5pD47+2ivUfsjDjyrtF6 -----END CERTIFICATE-----Generated at Sun Jul 20 02:18:31 2025 by rpki-client